flake/sops-nix: init

1 files changed, 9 insertions, 0 deletions

diff --git a/hosts/common.nix b/hosts/common.nix
index 56f2953..8cc13d8 100644
--- a/hosts/common.nix
+++ b/hosts/common.nix
@@ -3,6 +3,7 @@
 let
   user = config.userdata.user;
   groups = config.userdata.groups;
+  host = config.networking.hostName;
 in
 {
   imports = [
@@ -61,6 +62,8 @@ in
       htop
       curl
       neovim
+      age
+      sops
     ];
   };
   system.stateVersion = "23.05";
@@ -72,6 +75,12 @@ in
   ];
   nixpkgs.overlays = (import ../overlays);
 
+  # sops
+  sops = {
+    defaultSopsFile = "./${host}/secrets.yaml";
+    age.keyFile = "/var/secrets/sops-nix/key.txt";
+  };
+
   # programs
   programs = {
     adb.enable = true;